aws-cloudformation-local-test

    package software.amazon.logs.loggroup;

    import org.junit.jupiter.api.*;
    import static org.assertj.core.api.Assertions.assertThat;

    import software.amazon.awssdk.auth.credentials.AwsSessionCredentials;
    import software.amazon.cloudformation.proxy.*;
    import software.amazon.cloudformation.test.*;

    @TestMethodOrder(MethodOrderer.OrderAnnotation.class) // we order the tests to follows C to U to D
    @ExtendWith(InjectProfileCredentials.class) // extend with profile based credentials
    @EnabledIfSystemProperty(named = "desktop", matches = "true")
    @TestInstance(TestInstance.Lifecycle.PER_CLASS) // IMP PER_CLASS
    public class LifecycleTest extends KMSKeyEnabledServiceIntegrationTestBase {

        //
        // At the annotation software.amazon.cloudformation.test.annotations.InjectSessionCredentials to the
        // constructor. This will inject the role's credentials
        //
        public LifecycleTest(@InjectSessionCredentials(profile = "cfn-integration") AwsSessionCredentials awsCredentials) {
             super(awsCredentials, ((apiCall, provided) -> override));
        }
        ...
        ...
        @Order(300)
        @Test
        void addValidKMS() {
            final ResourceModel current = ResourceModel.builder().arn(model.getArn())
                .logGroupName(model.getLogGroupName()).retentionInDays(model.getRetentionInDays()).build();
            // Access a KMS key. The test ensures to only create one key and recycles despite any number of runs
            String kmsKeyId = getKmsKeyId();
            String kmsKeyArn = getKmsKeyArn();
            // Add your service to use KMS key
            addServiceAccess("logs", kmsKeyId);
            model.setKMSKeyArn(kmsKeyArn);
            ProgressEvent<ResourceModel, CallbackContext> event = new UpdateHandler()
                .handleRequest(getProxy(), createRequest(model, current), null, getLoggerProxy());
            assertThat(event.isSuccess()).isTrue();
            model = event.getResourceModel();
        }
        ...
        ...
    }

@ExtendWith(InjectProfileCredentials.class)
@EnabledIfSystemProperty(named = "desktop", matches = "true")
@TestInstance(TestInstance.Lifecycle.PER_CLASS)
public class CRUDLifecycleTest extends CRUDLifecycleTestBase<ResourceModel, CallbackContext> {

    private final ReadHandler readHandler = new ReadHandler();
    private final DeleteHandler deleteHandler = new DeleteHandler();
    private final UpdateHandler updateHandler = new UpdateHandler();
    private final CreateHandler createHandler = new CreateHandler();
    private final Map<Action, HandlerInvoke<ResourceModel, CallbackContext>> handlers =
        ImmutableMap.<Action, HandlerInvoke<ResourceModel, CallbackContext>>builder()
            .put(Action.CREATE, createHandler::handleRequest)
            .put(Action.READ, readHandler::handleRequest)
            .put(Action.UPDATE, updateHandler::handleRequest)
            .put(Action.DELETE, deleteHandler::handleRequest)
        .build();

    private final String logGroupName = "logGroup-TEST-DELETE-" + UUID.randomUUID().toString();

    static final Delay override = Constant.of().delay(Duration.ofSeconds(1))
        .timeout(Duration.ofSeconds(10)).build();
    public CRUDLifecycleTest(@InjectSessionCredentials(profile = "cfn-integ") AwsSessionCredentials sessionCredentials) {
        super(sessionCredentials, ((apiCall, provided) -> override));
    }

    @Override
    protected List<ResourceModels> testSeed() {
        final String kmsKeyId = getKmsKeyId();
        final String kmsKeyArn = getKmsKeyArn();
        List<ResourceModels> testGroups = new ArrayList<>(1);

        testGroups.add(
            newStepBuilder()
                .group("simple_normal")
                .create(ResourceModel.builder().logGroupName(logGroupName).build())
                .update(ResourceModel.builder().logGroupName(logGroupName).retentionInDays(7).build())
                .delete(ResourceModel.builder().logGroupName(logGroupName).build()));

        testGroups.add(
            newStepBuilder()
                .group("complex_with_failed_kms")
                .create(ResourceModel.builder().logGroupName(logGroupName).build())
                .createFail(ResourceModel.builder().logGroupName(logGroupName).build())
                .updateFail(ResourceModel.builder().logGroupName(logGroupName).retentionInDays(10).build())
                .update(ResourceModel.builder().logGroupName(logGroupName).retentionInDays(7).build())
                .updateFail(
                    ResourceModel.builder().logGroupName(logGroupName).retentionInDays(7)
                        .kMSKey("kmsKeyDoesNotExist").build())
                //
                // can not access logs service
                //
                .updateFail(() -> {
                    removeServiceAccess("logs", kmsKeyId, Region.US_EAST_2);
                    return ResourceModel.builder().logGroupName(logGroupName).retentionInDays(7)
                        .kMSKey(kmsKeyArn).build();
                })
                .update(() -> {
                    addServiceAccess("logs", kmsKeyId, Region.US_EAST_2);
                    return ResourceModel.builder().logGroupName(logGroupName).retentionInDays(7)
                        .kMSKey(kmsKeyArn).build();
                })
                .delete(ResourceModel.builder().logGroupName(logGroupName).build()));
        return testGroups;
    }

    @Override
    protected Map<Action, HandlerInvoke<ResourceModel, CallbackContext>> handlers() {
        return handlers;
    }

    @Override
    protected CallbackContext context() {
        return new CallbackContext();
    }
}